15:54:37 RRSAgent has joined #privacy 15:54:37 logging to http://www.w3.org/2012/04/19-privacy-irc 15:54:50 danielle, we also have a VOIP call-in option 15:55:04 http://www.w3.org/2006/tools/wiki/Zakim-SIP 15:55:17 but i guess i goin to find one i another moment 15:55:21 danielle had some difficulty connecting with the SIP earlier 15:55:22 hello Nick 15:55:27 rrsagent, make logs public 15:55:30 Christine has joined #privacy 15:55:33 yes I hav had some difficulties 15:55:41 hi danielle, how can I help? 15:55:54 spreibus, if you cannot connect using the United States country code, I recommend using the SIP connect 15:56:32 I think that is my connection the problem 15:56:44 don't have SIP. I'll try the UK phone number +44.117.370.6152. 15:56:57 zakim, this will be ping 15:56:57 ok, npdoty; I see Priv_IG()12:00PM scheduled to start in 4 minutes 15:57:14 Zakin, who is on the phone 15:57:24 Zakin, who is on the phone? 15:57:28 Zakim, who is on the phone? 15:57:28 Priv_IG()12:00PM has not yet started, rvaneijk 15:57:29 On IRC I see Christine, RRSAgent, Zakim, danielle, npdoty, rvaneijk, spreibus, J_Voracek, kboudaou 15:57:49 Cool, the association has been done automagically 15:57:56 Zakim seems behind, I'm on the phone 15:58:14 Zakim, who is on the phone? 15:58:14 Priv_IG()12:00PM has not yet started, npdoty 15:58:15 On IRC I see Christine, RRSAgent, Zakim, danielle, npdoty, rvaneijk, spreibus, J_Voracek, kboudaou 15:58:19 Joanne has joined #Privacy 15:58:22 wseltzer has joined #privacy 15:58:23 Zakim, this is PING 15:58:23 ok, npdoty; that matches Priv_IG()12:00PM 15:58:32 Zakim, who is on the phone? 15:58:32 On the phone I see ??P4, +1.508.380.aaaa, +358.504.83aabb, ??P7, +1.613.304.aacc, npdoty 15:58:49 - +358.504.83aabb 15:58:54 fwagner has joined #privacy 15:58:55 + +1.650.353.aadd 15:59:17 I won't be able to dial in but will watch on IRC. Have a great kick-off call. 15:59:22 Zakim, who is making noise? 15:59:27 - +1.613.304.aacc 15:59:31 Nick, I am on 011.31.70.55558538 15:59:32 + +358.504.83aaee 15:59:32 npdoty, listening for 10 seconds I heard sound from the following: +1.508.380.aaaa (11%), npdoty (17%), +1.650.353.aadd (33%) 15:59:40 +??P21 15:59:42 Zakim, aaaa is TrentAdams 15:59:42 Ashok_Malhotra has joined #privacy 15:59:43 +TrentAdams; got it 15:59:44 +justin 15:59:45 Nick, I am calling via Skype 16:00:01 Present+ IanOliver 16:00:05 Present+ FrankWagner 16:00:43 we'll give a couple minutes for people to call in, I think 16:00:49 alissa has joined #privacy 16:00:50 I am installing a voice plugin prior to dialing in - one moment 16:01:08 + +1.949.483.aaff 16:01:25 - +358.504.83aaee 16:01:49 james has joined #privacy 16:01:52 Agenda: http://lists.w3.org/Archives/Public/public-privacy/2012AprJun/0041.html 16:02:02 + +1.215.286.aagg 16:02:08 Chair: Christine and twhalen 16:02:27 +??P1 16:02:29 Meeting: Privacy Interest Group kickoff teleconference 16:02:38 + +44.208.123.aahh 16:02:42 +[Microsoft] 16:02:48 + +358.504.83aaii 16:03:00 + +1.613.513.aajj 16:03:08 +Joseph_Scheuhammer 16:03:11 JC has joined #privacy 16:03:28 +??P17 16:03:32 +Ashok_Malhotra 16:03:47 + +33.4.92.96.aakk 16:03:49 tara has joined #privacy 16:04:02 I am the 613 area code. 16:04:11 Zakim, aajj is tara 16:04:19 Zakim, who is making noise? 16:04:20 +tara; got it 16:04:25 + +1.920.912.aall 16:04:38 npdoty, listening for 10 seconds I heard sound from the following: [Microsoft] (5%), Joseph_Scheuhammer (37%) 16:04:50 -??P17 16:04:53 jtrentadams has joined #privacy 16:05:14 Zakim, mute Joseph_Scheuhammer 16:05:14 Joseph_Scheuhammer should now be muted 16:05:31 Zakim, unmute Joseph_Scheuhammer 16:05:31 Joseph_Scheuhammer should no longer be muted 16:05:56 Sorry about network issues; hope this stsys up. 16:06:24 +??P34 16:06:32 P34 is me 16:06:42 Zakim, ??P34 is spreibus 16:06:42 +spreibus; got it 16:06:49 Zakim, P34 is me 16:06:49 sorry, spreibus, I do not recognize a party named 'P34' 16:07:01 IanO has joined #Privacy 16:07:04 Zakim, who is making noise? 16:07:09 P21 is me 16:07:15 npdoty, listening for 10 seconds I heard sound from the following: ??P1 (61%), Joseph_Scheuhammer (64%) 16:07:22 + +1.202.695.aamm 16:07:35 apologies for the bad link on /Privacy, will fix for future calls 16:07:39 Zakim, P21 is me 16:07:39 sorry, fwagner, I do not recognize a party named 'P21' 16:07:42 +WileyS 16:07:46 Topic: Introductions 16:07:47 Good evening/afternoon/morning, Ian 16:07:59 susanisrael has joined #privacy 16:08:00 WileyS has joined #privacy 16:08:02 Lia has joined #privacy 16:08:21 I think I mistakenly announced myself as calling in from area code 508... I'm actually dialing in via Skype... anyone know how to correct it? 16:08:32 Zakim, who is making noise? 16:08:45 npdoty, listening for 10 seconds I heard sound from the following: Joseph_Scheuhammer (75%) 16:08:45 bilcorry has joined #privacy 16:08:48 I can scribe 16:08:52 Zakim, mute Joseph_Sceuhammer 16:08:52 sorry, npdoty, I do not know which phone connection belongs to Joseph_Sceuhammer 16:09:07 Thank you for volunteering to scribe 16:09:07 I have to leave in a little more than half an hour, sorry. 16:09:15 scribenick: WileyS 16:09:33 I"m on both 16:09:37 Christine: We have a number of people on the call - are you also on IRC? Trying to get a sense of who is on what side. 16:09:39 I"on both too 16:09:41 I'm on both 16:09:44 I'm on both also 16:09:51 Hi I'm on both ! 16:09:56 I'm on both 16:09:58 +bilcorry 16:09:59 ...one person announced they are not on IRC yet 16:10:03 is also on both 16:10:07 Note: Tara is speaking not Christine 16:10:14 vincent has joined #privacy 16:10:23 s/Christine: We/tara: We/ 16:10:23 + +358.504.87aann 16:10:38 Tara: encouraging people to join the IRC to more formalize our activities 16:10:39 Tara, not sure I'm in the group. 16:10:45 Zakim, who is making noise? 16:10:58 npdoty, listening for 12 seconds I heard sound from the following: tara (82%), Joseph_Scheuhammer (62%) 16:11:00 details about joining the group here: http://www.w3.org/Privacy/ 16:11:02 erin has joined #privacy 16:11:05 Zakim, mute Joseph_Scheuhammer 16:11:05 Joseph_Scheuhammer should now be muted 16:11:05 Zakim, mute me 16:11:07 bilcorry should now be muted 16:11:09 Tara: any new agenda items beyond the ones on the agenda that was sent around? 16:11:21 reminder of the agenda: http://lists.w3.org/Archives/Public/public-privacy/2012AprJun/0041.html 16:11:34 ...not hearing any new items - will jump in with what we have so far 16:11:40 ...start with introductions 16:12:17 Tara - Co-chair, Canadian, works with the Privacy Commission, pro-privacy standards in place, IAB and ISO activities as well 16:12:43 Christine: already have our email introductions, Australian/Swiss 16:13:06 Nick: W3C staff contact, any issues contact me, also at UCBerkley working on privacy standards 16:13:49 James Brentano, BlueCava, device id 16:13:49 James: Bluecava, device identification, doing the right thing by the right people 16:14:06 JC: MSFT, Bing & MSFT Advertising, learn more about online privacy from the group 16:14:36 Trent Adams: Used to work with Christine, now at PayPal, Internet Governance Group, new initiative is privacy work, glad to be back, also part of the IAB privacy program 16:15:05 Alissa Cooper: CDT, lead the Privacy program at the IETF, standards activities for quite some time 16:15:21 Rob: A29WP 16:15:39 -Joseph_Scheuhammer 16:16:13 : South of France, Security Management, goal of research is how to change the way mobile apps that allow the end user to control their data, fine granularity of control 16:16:17 Rob: ph.d student university of leiden (not representing employer or A29 WP) in this working group. 16:16:33 16:16:48 Susan: Comcast, attorney working on privacy issues, supporting their policy group 16:16:54 My name is Karima Boudaoud 16:17:20 Erin Kenneally 16:17:41 : privacy strategist, research realm, information security at UC San Diego 16:18:12 : Oracle 16:18:22 Ashok Malhotra, from the TAG 16:18:24 + +1.310.597.aaoo 16:18:39 Mark Lizar, consultant on privacy frameworks 16:18:50 Mark: consultant, working on privacy frameworks 16:19:14 Nick, are you going to get these? 16:19:39 WileyS, I missed that last one, though I think we have all the other names logged 16:19:50 Ian: principle architect at Nokia, engineering privacy, developing tools. 16:20:03 Ian Oliver, Nokia 16:20:05 Sören Preibusch, U Cambridge, was in W3C groups P3P, PLING etc.; I'm conducting large-scale user experiments on consumer privacy, willingness to pay for privacy and general privacy preferences in ecommerce and social networking. 16:20:20 Thank you Suren 16:20:35 Having some phone trouble- Lia Sheena, a fellow at the Future of Privacy Forum working on online and mobile privacy issues. 16:20:43 Ian Oliver 16:20:43 Principal Architect for Privacy at Nokia Location and Services 16:20:43 working on engineering privacy into our products, tools, techniques and architectural 16:20:43 support for our developers development, 16:20:43 particular interest into 16:20:44 ontologies, taxonomies, data classification, information analysis and ultimately 16:20:46 a formalisation of or formal framework for privacy @i_j_oliver 16:20:51 + +1.415.520.aapp 16:21:01 WileyS: vp of privacy and data governance at Yahoo! help inform from an industry perspective 16:21:06 Shane Wiley - VP, Privacy & Data Governance at Yahoo! 16:21:12 Zakim, +1.415.520 is Joanne 16:21:12 +Joanne; got it 16:21:21 Frank Wagner, Deutsche Telecom 16:21:35 rrsagent, pointer? 16:21:35 See http://www.w3.org/2012/04/19-privacy-irc#T16-21-35 16:22:15 Joanne: director of product policy, certification across TRUSTe products 16:22:16 Joanne: Truste, developing certification standards across their products 16:22:40 Nick, this one is yours :-) 16:22:41 Hannes Tschofenig 16:23:12 ... interested in designing privacy into architectures 16:23:25 Topic: Goals 16:23:36 Charter http://www.w3.org/2011/07/privacy-ig-charter.html 16:23:40 Frank Wagner, Deutsche Telekom, Group Privacy, responsible for defining privacy requirements in the product development processes, looking forward to exchange best practice between developers, providers and users 16:23:57 Kara: We welcome feedback on the mission at any time 16:24:02 s/Kara/Tara/ 16:24:20 ...we may publish a privacy framework document 16:24:32 - +358.504.87aann 16:24:35 ...these documents may provide beneficial guidance 16:24:36 Patrick has joined #privacy 16:24:49 ...Any thoughts on the list of deliverables? 16:24:57 any other deliverables or goals we'd like to see from the group? 16:24:59 + +358.504.87aaqq 16:24:59 ...you can all jump in at once...(silence) 16:25:23 Nick, do you want to scribe? Its all yours. :-) 16:25:42 +q 16:25:49 +Joseph_Scheuhammer 16:25:53 FrankWagner: would be useful to have a best practice paper, could it be useful to have a document on best practices for mobile phones? 16:26:01 Zakim, npdoty is scribe 16:26:01 +scribe; got it 16:26:09 A best practices paper would be very useful 16:26:46 Hannes: a best practices paper would be useful, but is just re-iterating them in a different fashion going to change anything differently 16:27:28 Nick, you're way better at this than I am - all yours 16:27:42 @@@: not sure a best practices document would be useful 16:27:45 +q 16:27:50 ... a whole host of terminology that's very, very vague 16:28:12 q+ 16:28:26 ... push somewhere on terminology, security terminology, identity terminology, work by Solove 16:28:38 +q 16:28:51 ... what terminology do we have on use of information? Nissenbaum and data flows 16:29:06 ... happy to put forward some of our proposals on terminology 16:29:17 Is someone speaking out of queue? 16:29:18 zakim, ??P21 is me 16:29:18 +fwagner; got it 16:29:23 Hannes: before you start spending years on terminology, there is prior work on that 16:29:33 q? 16:29:57 ... at IAB, we looked around at other engineers and what they had produced, doc from Marit Hansen, re-write as too complex for our particular audience 16:30:00 + +1.978.944.aarr 16:30:07 ... maybe you would find that work useful 16:30:55 +q 16:31:11 -q 16:31:12 s/@@@/IanOliver/ 16:31:32 John_ has joined #Privacy 16:31:47 Hannes: might be misunderstood, a difference in considerations needed for those who develop applications and the protocol engineer 16:31:52 q? 16:31:54 ack ??P21 16:32:04 Frank, I think that fixes your issue 16:32:32 - +1.650.353.aadd 16:32:36 - +1.310.597.aaoo 16:32:54 -Joanne 16:32:56 Frank: way to discuss building privacy into products, understand internationally our requirements, can do a best practice paper 16:33:03 ack JC 16:33:31 vm has joined #privacy 16:33:33 JC: would like to see us respond to different regulations that come out 16:33:54 ... best practices or ways to implement for specific regulations, examples, like with the cookie directive 16:34:14 @@: +1 as a case study, what guidelines might be recommended 16:34:14 I would caution not to go down the road specifying what data items are sensitive. Privacy preferences are too diverse to say that a give data item is sensitive. Similar for usage. This is a per user pref. 16:34:17 q? 16:34:24 ack WileyS 16:34:53 WileyS: would like to see w3c focus on open standards for technical issues, like Tracking Protection Working Group 16:35:11 ... technically centric like fingerprinting, de-identification 16:35:28 ... broad issues that would be beneficial to consumers, business and regulators alike 16:35:42 ... avoid becoming another generic policy discussion, rather ground deliverables in open technical standards 16:35:43 +1 16:35:51 +1 16:36:30 spreibus: not as helpful to nail down specific sensitive terms, since it varies so much between users 16:36:43 ... instead developing something that addresses this with user preferences 16:36:48 ack spreibus 16:36:49 ack Christine 16:37:22 Christine: hope Alissa can give us the wisdom from the IAB Privacy Program side and the need for that document 16:37:35 ... agree that we need targeted scope of work, so that we get something done 16:38:01 ... insert the demands we see from outside of the group, what would people ideally like the Privacy Interest Group to do 16:38:23 MarkLizar has joined #privacy 16:38:29 ... I've heard people say that in an ideal world, would like the group to develop a privacy considerations document specific for W3C protocol designers 16:38:51 IAB priv considerations draft is here: http://tools.ietf.org/html/draft-iab-privacy-considerations-02 16:39:10 ... when we have the expertise that we need, could also work like the Internationalization and Accessibility groups who conduct reviews of specs from other groups about privacy issues 16:39:22 ... identify the privacy issues early on 16:39:27 ack alissa 16:40:15 alissa: what is the scope of the work? start with a small scope, continue to add on as you have success, to me, it would be preferable if we keep the scope small at the beginning 16:40:43 My futher point is that this group does not need to do all the work; we can help/work with other W3C groups 16:40:44 +1 16:40:48 ... Shane raised this idea of doing actually technical standardization, less likely to do Recommendation-track standardization work 16:41:09 (regarding scope in the charter: "Where appropriate, the Interest Group will recommend areas where W3C should begin recommendation-track standards work on privacy issues and may prototype or initiate such work within the group.") 16:41:39 alissa: first, developing some guidance for participants in the W3C to incorporate privacy-thinking in the standards development, exactly what we're doing with the IAB privacy considerations document 16:41:45 http://tools.ietf.org/html/draft-iab-privacy-considerations-02 16:42:24 +1 16:42:38 alissa: from my experience in Geolocation, DAP, etc., not everyone knows everything that we know, how we can give guidelines, about identifiers, data flows 16:42:51 I am looking forward to the discussions in this group. Got to leave now. 'till next time ! 16:43:06 -??P7 16:43:07 ... and once we have that guidance, it would be useful to be that early review team, evangelize based on this guidance about what we should think about early in the process 16:43:26 +1 on the "privacy best practices" in relation to W3C open standards - but this appears to be more "service" oriented so we would need WGs to come to us first 16:43:44 What do we want to accomplish proactively? 16:43:46 ... guidance for standards developers, and then the action item of getting that out in use 16:44:16 disagree WileyS, we have plenty of experience to know where the common pitfalls are 16:44:29 and some of that informs Robin's draft, Dan's draft before that 16:44:30 tara: have received a draft document specifically brought forward by Robin Berjon for feedback 16:44:42 q+ 16:44:43 Link to document http://darobin.github.com/api-design-privacy/api-design-privacy.html 16:44:48 the WGs are unlikely to come to us 16:45:19 Alissa, so are you suggesting review their work proactively as an "interest" group? 16:45:41 Document Nick is referring to - http://www.w3.org/TR/2010/NOTE-dap-privacy-reqs-20100629 16:45:53 I'm suggesting developing a framework for doing reviews, and then using that to do them 16:46:00 Here is Robin's document: http://darobin.github.com/api-design-privacy/api-design-privacy.html 16:46:19 Alissa, thank you for the clarification, I see value in that approach. 16:46:40 q+ 16:46:46 q- 16:47:14 alissa: privacy thinking in the Device APIs group gone through a number of iterations 16:47:29 ... all separately standardizing access to different kinds of data on devices 16:47:44 ... as it turns out, doing privacy API-by-API is complicated 16:47:58 privacy by API is better tg 16:48:03 ... like what if applications use many APIs, how do we handle permissions 16:48:08 -Joseph_Scheuhammer 16:48:08 than no privacy by API 16:48:50 spreibus: although api-by-api might be fragmented, better than nothing 16:49:15 ... useful distinctions between microphone and camera 16:49:34 corresponding to mental model of users 16:49:44 Dom's WWW2012 talk is relevant here: http://www.w3.org/2012/Talks/dhm-privacy-www/ 16:49:48 API is not the only solution for privacy.... 16:50:08 tara: also had a request for comments from the Common Terms project 16:50:10 q+ 16:50:23 Link to Common Terms Project - http://www.commonterms.net/Solution.aspx 16:50:26 Yahoo! is reviewing the CommonTerms approach right now - no feedback just yet 16:50:40 soren: reviewing Common Terms now, but not sure what new about it 16:50:44 Q? 16:50:47 q+ 16:50:51 ack kboudaou 16:51:25 susanisrael has joined #privacy 16:51:38 kboudaou: how the user will control the data, we need to consider the fact that we have different kinds of users 16:52:02 ... privacy-by-design, but need to consider that should be respect the preferences of the user 16:52:33 ... need to define best practices for developers who design mobile applications used by variety of end users 16:52:41 +q 16:54:33 +1 to what nick is saying about surveying what recommendations have been made as a good first step 16:54:47 ack npdoty 16:55:02 npdoty: a lot of discussion about the best way to do permissions 16:55:38 Re Alissa's comment - I also think it would be useful to identify privacy issues that have come up in different W3C groups 16:55:45 ... could aggregate and compare different ways permissions have been done by APIs, best practices, considerations and concerns as a starting point for our Guidelines doc 16:56:12 IanO: permissions is more of a security issue (on which we have existing work), maybe we should concentrate on the nature of the data itself, how revealing is that information 16:56:39 ... what are the privacy aspects, not just traditional security aspects (terms not too well-defined) 16:57:53 Topic: Next steps 16:57:58 Zakim, agenda? 16:57:58 I see nothing on the agenda 16:58:03 q- IanO 16:58:09 -Ashok_Malhotra 16:58:12 q- 16:58:22 Co-chairs, in the future could you please load the agenda into Zakim prior to the call? 16:58:23 tara: originally thinking monthly calls, next time would be May 17th at 16:00 UTC 16:58:39 WileyS, my fault on that one, I'll handle it in future 16:58:46 monthly seems good 16:58:54 +1 for monthly 16:59:04 monthly would be useful - +1 16:59:12 tara: potential connections to other groups, a list in the charter, but might also add, as in the case of the Crypto WG 16:59:31 Christine: haven't nailed down a specific work item 16:59:37 ... in the mean time we can continue discussions via email 16:59:43 - +1.202.695.aamm 16:59:47 -TrentAdams 16:59:51 monthly fine for me too 17:00:01 ... TAG (Technical Architecture Group) has expressed interest in collaborating with us on privacy considerations as we go forward 17:00:25 tara: so much to talk about, but we've run out of time and have ourselves set up for the next call 17:00:30 ... thanks for coming out! 17:00:32 - +1.920.912.aall 17:00:34 -WileyS 17:00:34 many thanks all 17:00:42 thanks to the chairs 17:00:49 thanks to the chairs & nick ! 17:00:54 thanks to all ! 17:01:01 thanks to our scribes! 17:01:04 -[Microsoft] 17:01:06 - +1.978.944.aarr 17:01:08 -justin 17:01:09 -??P1 17:01:10 - +1.215.286.aagg 17:01:12 -bilcorry 17:01:14 - +358.504.87aaqq 17:01:15 - +1.949.483.aaff 17:01:15 -fwagner 17:01:17 Christine: thanks, I'm excited about our productive work 17:01:18 - +33.4.92.96.aakk 17:01:20 -spreibus 17:01:20 thanks all! 17:01:21 -??P4 17:01:24 -tara 17:01:28 james has left #privacy 17:01:29 -scribe 17:01:31 - +44.208.123.aahh 17:01:48 - +358.504.83aaii 17:01:50 Priv_IG()12:00PM has ended 17:01:50 Attendees were +1.508.380.aaaa, +358.504.83aabb, +1.613.304.aacc, +1.650.353.aadd, +358.504.83aaee, TrentAdams, justin, +1.949.483.aaff, +1.215.286.aagg, +44.208.123.aahh, 17:01:50 ... [Microsoft], +358.504.83aaii, +1.613.513.aajj, Joseph_Scheuhammer, Ashok_Malhotra, +33.4.92.96.aakk, tara, +1.920.912.aall, spreibus, +1.202.695.aamm, WileyS, bilcorry, 17:01:52 ... +358.504.87aann, +1.310.597.aaoo, +1.415.520.aapp, Joanne, +358.504.87aaqq, scribe, fwagner, +1.978.944.aarr 17:01:57 spreibus has joined #privacy 17:02:19 fwagner has left #privacy 17:03:13 rrsagent, draft minutes 17:03:13 I have made the request to generate http://www.w3.org/2012/04/19-privacy-minutes.html npdoty 18:02:11 Zakim, bye 18:02:11 Zakim has left #privacy 18:02:17 rrsagent, bye 18:02:17 I see no action items